Job PurposeThis position drives the assessment, implementation, and continuous improvement of cybersecurity controls across Peoples Bank's technology environment. This role serves as a liaison between Information Security, Information Technology, application teams, vendors, and managed service providers to help identify risks, document current-state environments, support technology modernization initiatives, and ensure security requirements are incorporated into business and technology projects.
The successful candidate combines technical aptitude, strong organizational skills, and the ability to communicate effectively with both technical and non-technical stakeholders. This role owns security engineering activities for assigned assessments, implementations, remediation efforts, documentation, and operational improvement initiatives, while partnering with IT, application teams, vendors, and managed service providers to implement secure and scalable solutions.
Job Duties:- Security Assessments and Technology Reviews
- Lead assessments of endpoint security, remote access solutions, Microsoft security capabilities, identity and access management processes, logging capabilities, and other priority technology areas
- Gather and document current-state configurations, workflows, ownership, dependencies, and control gaps
- Lead the technical direction and continuous improvement of vulnerability management, including prioritization, complex remediation decisions, compensating controls, and escalation of unresolved risk
- Identify opportunities to improve security controls while balancing operational requirements
- Develop recommendations and implementation roadmaps
- Security Project Implementation
- Participate in technology projects to identify security requirements related to identity, endpoint protection, logging and monitoring, data protection, vendor access, and system administration
- Lead or coordinate technology evaluations, pilots, proof-of-concepts, and implementation activities
- Coordinate technical discussions among Information Security, Information Technology, application teams, vendors, and managed service providers
- Track project findings, recommendations, action items, risks, dependencies, and remediation efforts through completion
- Documentation and Process Improvement
- Develop and maintain process documentation, technical standards, diagrams, inventories, and support materials
- Document current-state architectures, workflows, technology dependencies, and security control implementations to support assessments and modernization initiatives
- Maintain inventories of security technologies and capabilities
- Coordinate development and refinement of security procedures and operating practices
- Security Operations Support
- Partner with security operations personnel to understand operational challenges and ensure security improvement initiatives align with operational requirements
- Support audits, examinations, and regulatory requests as assigned
- Collaboration and Communication
- Serve as a security representative for technology initiatives and projects
- Work closely with Information Security, IT, business teams, vendors, and managed service providers
- Communicate project status, risks, recommendations, and findings to stakeholders
- Promote cybersecurity awareness and adoption of security best practices throughout the organization
Education, Job Skills and Qualifications: - Bachelor's degree or equivalent work experience
- 5+ years of experience in cybersecurity, systems administration, engineering, infrastructure, identity management, or related technology disciplines
- Demonstrated ability to lead technology assessments, implementations, or operational improvement initiatives
- Strong understanding of Microsoft 365, Active Directory, Entra ID, endpoint security, vulnerability management, and access management concepts
- Experience evaluating technology risks and recommending practical security improvements
- Experience coordinating technical activities across security, infrastructure, application, and vendor teams
- Ability to translate technical concepts into business-focused recommendations and action plans
- Strong communication, facilitation, and organizational skills
- Ability to independently drive complex initiatives from assessment through implementation
- Experience leading security technology implementations
- Experience designing or improving identity, endpoint security, remote access, or security monitoring capabilities
- Experience developing roadmaps, implementation plans, and operational procedures
- Experience mentoring technical staff and serving as a technical lead
- Experience presenting recommendations to technical and business stakeholders
- Familiarity with CRI, NIST CSF, CIS Controls, or other security frameworks
- Experience with Microsoft security technologies including Defender, Entra ID, Conditional Access, Sentinel, or related platforms
- Basic scripting and automation experience
- Team player
- Valid driver's license; Some travel required
Basic Qualifications- Bachelor's degree or equivalent work experience
- 5+ years of experience in cybersecurity, systems administration, engineering, infrastructure, identity management, or related technology disciplines
- Valid driver's license; Some travel required
